Question 166
Your organization is working with a new consulting firm to help with the design, development, and deployment of a new IT service. The consultants will be joining your organization at various points throughout the project and will not know what permissions they need or who to request the access from. As the Cloud Administrator, what can you implement to ensure consultants can easily request and get all of the access they need to do their job?
Question 167
Due to a recent company acquisition, you have inherited a new Azure tenant with 1 subscription associated that you have the manage. The security has been neglected and you are looking for a quick and easy way to enable various security settings like requiring users to Register for Multi- factor authentication, blocking legacy authentication protocols, and protecting privileged activities like access to the Azure portal. What is the best way to enforce these settings with the least amount of administrative effort.
Question 168
You have an Azure subscription that contains a user named User! and two resource groups named RG1 and RG2.
You need to ensure that User1 can perform the following tasks:
* View all resources.
* Restart virtual machines.
* Create virtual machines in RG1 only.
* Create storage accounts in RG1 only.
What is the minimum number of role-based access control (RBAC) role assignment* required?
Question 169
You need to support the planned changes and meet the technical requirements for MFA.
Which feature should you use, and how long before the users must complete the registration? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Question 170
You have a Microsoft Entra tenant that contains the groups shown in the following table.
You need to implement Privileged Identity Management (PIM) for the groups.
Which groups can be managed by using PIM?


